Mockup 3: Unlock
Status, from /shipped/: shipped v0.1.5 Design mockups: ten screens as static pictures in a mini browser frame and as ASCII art, each linked to the intent it realises · proposed Sign in and out with Google and email/password against the chosen environment · proposed Passkey with WebAuthn PRF derives the keyring wrapping key; RP ID secrets.sgit.ai · proposed Entries: six kinds kept apart, vault list, entry page, copy and reveal, lock timers
What secrets.sgit.ai/app/unlock.html is meant to look like, from section 6.2 of the brief. A static picture: nothing on it works, the values are invented, and the screen itself is proposed.
One gesture. The page calls navigator.credentials.get with the PRF evaluation; the authenticator returns 32 bytes bound to this origin; the browser derives the wrapping key, unwraps the KEK and decrypts the body into memory. The recovery code is the fallback. Nothing decrypted is written anywhere.
Unlock your keyring
Keyring found: rev 7, 23 entries, last written 2026-10-05 from "MacBook Chrome".
Unlock with passkeyTouch your security key, or use Face ID, Touch ID, Windows Hello or your phone.
No passkey on this device? Use the recovery code
Unlock with the codeAfter unlocking with the code you will be asked to add a passkey for this device.
The same screen as ASCII
┌─ secrets.sgit.ai/app/unlock.html ────────────────────────────────┐ │ secrets.sgit.ai [prod] [locked] dinis@example.com │ ├──────────────────────────────────────────────────────────────────┤ │ ┌──────────────────────────────────────────┐ │ │ │ Unlock your keyring │ │ │ │ Keyring found: rev 7, 23 entries │ │ │ │ │ │ │ │ [ Unlock with passkey ] │ │ │ │ Touch your key, or Face ID / Touch ID │ │ │ │ │ │ │ │ No passkey here? Use the recovery code │ │ │ │ ┌──────────────────────────────────────┐ │ │ │ │ │ ____-____-____-____-____-____-__ │ │ │ │ │ [ Unlock with the code ] │ │ │ └──────────────────────────────────────────┘ │ └──────────────────────────────────────────────────────────────────┘
Intent it realises
Open each in the review navigator: returning · flow.returning · flow.new-device.